46.101.141.170

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# INTELLIGENCE BRIEFING: IP 46.101.141.170/32

## Executive Summary

IP address 46.101.141.170 operates on DigitalOcean infrastructure in Frankfurt, Germany. Assessment indicates low-risk operational profile with no active threat indicators. The IP functions as a cloud-based web server with Apple-branded TLS certificates and Akamai edge hosting.

---

## Network Profile

Attribute	Value
IP Address	46.101.141.170/32
Risk Score	25 (Low)
ASN	14061
Organization	DigitalOcean
Country	Germany (DE)
City	Frankfurt am Main
Infrastructure Type	Cloud
Network Role	Web Server

---

## Threat Assessment

Overall Reputation: Low Risk
Known Attacker: No
Spam Source: No
Tor Exit Node: No
Blacklist Count: 0
Abuse Confidence Score: Not applicable
Known Campaigns: None detected
Threat Feeds: Empty

Temporal Indicators:

Threat observation count: 1
Threat persistence days: 0
Persistently malicious: No
Ownership changes: 0

---

## Active Services

Port	Protocol	Service	Banner
22	TCP	SSH	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16
443	TCP	HTTPS	AkamaiGHost
8443	TCP	HTTPS-alt	AkamaiGHost

TLS Certificate Analysis:

Issuer: CN=Apple Public EV Server RSA CA 1 - G1, O=Apple Inc., C=US
Subject: CN=www.apple.com, O=Apple Inc., California, US
Validation: Valid certificate (non-self-signed)
Covered SANs: images.apple.com, www.apple.com, www.apple.com.cn

---

## Control Plane & Routing

Origin ASN: 14061
BGP Prefix: 46.101.128.0/17
Route Stability: False
MOAS Status: False
DNSSEC Valid: True
DNSBL Listed: 1 of 8 total lists
Operator Score: 0.1304 (Minimal)

---

## Neighborhood Analysis

Subnet: 46.101.141.0/24
Abuse Density: 0
Classification: Mostly clean
Total Siblings: 1
Active Siblings: 1
Threat Siblings: 1

---

## DNS Analysis

PTR Hostnames: None
Forward Resolution: Not confirmed
Hosted Domains: 0
Email Auth: SPF and DMARC not configured
TXT Records: 0

---

## Observation History (Recent 25 signals)

Key temporal observations from June 2026 indicate:

Apple domain resolutions with SPF and DMARC records present
HTTP/HTTPS responses showing Akamai edge infrastructure
TLS 1.3 cipher suite: TLS_AES_256_GCM_SHA384
Server banner consistent: AkamaiGHost

---

## Recommended Actions

Current Risk Score: 25 (Low)

Firewall Recommendations: None required at this time

Assessment: This IP exhibits characteristics of legitimate cloud infrastructure hosting Apple-related services. The presence of valid EV certificates, proper email authentication where applicable, and low-risk classification support routine operational treatment. Standard monitoring is recommended.

---

## Intelligence Notes

Infrastructure is cloud-hosted on DigitalOcean
TLS certificates indicate Apple Inc. service hosting
Akamai edge hosting suggests CDN/proxied traffic patterns
No malicious indicators detected in threat feeds
Neighborhood subnet shows minimal abuse density

Classification: LOW RISK

Last Updated: 2026-06-19

Data Sources: 25 observation signals analyzed

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇩🇪 Germany
Region	HE
City	Frankfurt am Main
Timezone	Europe/Berlin
Latitude	50.12
Longitude	8.68

🏢 Ownership & Registration

Organization	digitalocean
ASN	AS14061
Network Name	—
CIDR Block	—
RIR	RIPE
Country	—
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	60% (Good)
SPF	1/2 domains
DMARC	1/2 domains
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured
Domains Checked	2 domains

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Web Server
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
443	https	tcp	—
22	ssh	tcp	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16
8443	https-alt	tcp	—
Closed Ports	25, 80, 3389, 8080 (3 open / 7 scanned)

Server	AkamaiGHost
HTTP Title	—
SSH Version	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16

🔐 TLS Certificate

🔒

CN=www.apple.com, O=Apple Inc., L=Cupertino, S=California, C=US, SERIALNUMBER=C0806592, jurisdictionStateOrProvinceName=California, jurisdictionCountryName=US, businessCategory=Private Organization

Issued by CN=Apple Public EV Server RSA CA 1 - G1, O=Apple Inc., C=US

Self-signed: No

SANs	images.apple.comwww.apple.comwww.apple.com.cn
Valid From	2026-02-11T17:44:10+00:00
Valid Until	2026-08-18T17:30:10+00:00
TLS Protocol	Tls13
Cipher Suite	TLS_AES_256_GCM_SHA384
Signature Algorithm	sha256RSA
Validity Period	187 days
Serial Number	0A22ACE42FC71F463F953EF0B5A83F0C
Thumbprint	7AA1D4BDDA4FABDA8C5906544FB16AD61EF7C202

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	26%	2	4
routing	8%	1	1
services	28%	2	3
ownership	20%	2	3
reputation	28%	1	3
geolocation	33%	2	3
Overall	24%	10	17

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Mixed Signals (68%) — 2 contradiction(s)
Attribution	Low (35%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

⚠ Geo sources disagree on country: DE, US
⚠ TLS certificate claims US but primary geo says DE

📅 Observation Timeline 🔄 Live

First Seen	2026-05-08 23:18:38 UTC
Last Seen	2026-06-27 14:36:20 UTC
Profile Built	2026-06-28 08:41:29 UTC
Data Freshness	Live
Signal Types	24
Total Observations	30

🔍 24 signal types · 30 observations collected

This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

46.101.141.170📋 Copy